Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
File:                     NRNTQp5y6yhswY7L64-nGjHAgZA.cer (raw, json)
Hash identifier:          MO1Z3WB6ePaJsB7vb1p6poBCwvX39FILqMnio3TXiWw=
Subject key identifier:   35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019423D6FB20053B913F9341F14C1A363901
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Wed 01 Jan 2025 21:47:59 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 62284
                          IP: 185.110.28.0/22
                          IP: 2a13:e180::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d6:fb:20:05:3b:91:3f:93:41:f1:4c:1a:36:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 21:47:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:ea:8b:50:19:eb:a8:7f:8b:de:58:e3:f5:
                    a9:1b:9b:97:2b:9d:5c:7b:27:82:ce:a6:81:bf:39:
                    24:c7:f2:3a:cf:f0:fc:5a:00:fb:51:0b:96:38:61:
                    71:38:46:6a:a7:3f:12:b8:b4:14:35:0e:63:ae:cd:
                    98:2f:ac:48:9e:cb:48:4c:c4:64:b1:24:4a:7d:b0:
                    88:f4:5c:2d:79:8d:4f:65:55:bc:b9:f8:89:e4:41:
                    48:6c:58:1d:6c:c4:6c:1c:14:9c:46:21:bb:b2:09:
                    ef:2c:1b:99:a3:fe:94:ce:ba:7c:8f:70:71:f2:68:
                    84:47:ca:bf:24:44:3b:1b:5b:b1:6c:83:c3:03:97:
                    fc:bb:94:de:58:d8:7a:8b:dd:43:94:3a:3e:8e:be:
                    bf:8c:e8:00:67:89:3d:12:3d:c0:2b:aa:ae:7c:28:
                    fa:b0:2a:b8:d9:b5:69:05:0e:d8:3d:80:31:91:95:
                    eb:85:8f:5e:49:0a:86:67:2f:2f:b1:4a:85:e6:37:
                    53:0f:78:03:aa:88:f2:19:31:a7:d4:10:db:2d:5a:
                    fb:5c:e2:c2:7e:02:6c:d6:04:3a:13:29:d2:9a:ce:
                    04:19:52:af:e7:57:25:d2:22:99:90:e1:b4:4c:8b:
                    05:14:56:c0:c9:07:9e:df:82:9d:aa:69:b2:44:5c:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.28.0/22
                IPv6:
                  2a13:e180::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62284

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:f8:c8:4b:cd:04:84:fc:ce:41:90:de:3e:f5:63:f7:c3:
         1c:20:fd:bc:d1:03:d9:54:cc:96:25:52:d7:3e:e0:72:f8:ba:
         25:79:d6:e7:32:1d:02:f8:8c:76:f5:68:90:f4:72:f2:53:b3:
         bd:df:62:86:b3:45:de:99:97:cc:58:45:c5:c6:1a:34:e2:c4:
         8c:93:bf:f5:47:01:74:12:b6:6b:92:c1:53:61:06:c3:d1:c0:
         99:c4:b9:f4:5d:78:99:8b:a6:b7:83:a8:6b:0a:98:15:9b:d6:
         4e:c4:81:6b:79:cf:45:f7:28:3f:7b:25:3d:3a:d5:ed:91:65:
         a6:9b:e3:19:d7:fd:4b:47:52:89:34:60:6d:db:54:13:c6:52:
         93:e0:8a:0a:c3:61:b7:f0:61:59:6f:92:08:22:37:4f:e2:c5:
         ba:8f:fb:0a:4f:b1:3e:95:bb:95:5f:6b:89:c5:f5:1c:56:1d:
         0c:4e:0f:b6:cd:47:4b:1e:d5:c6:45:a0:2d:6b:83:12:e1:fb:
         8a:95:d7:86:00:f4:73:79:bd:69:06:3f:8c:85:aa:25:6d:00:
         e1:06:15:cb:55:54:e6:68:f9:c4:19:d7:85:bf:8f:c9:2d:bf:
         92:4a:22:86:7d:b0:9d:90:67:6b:12:e9:10:a4:a0:2d:65:76:
         fd:46:3d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----